Privacy Policy

To generate your pre-filled forms we collect:

Your data is used for one purpose: generating your pre-filled Thai immigration forms and personalised document checklist.

We do not use your data for advertising. We do not sell it. We do not share it with anyone except the services required to operate the platform.

Your data is kept while your account is active, so that your answers can be pre-filled when you renew next year. You can delete your account and all associated data at any time from your dashboard - no email required.

Under Thailand's Personal Data Protection Act (PDPA) you have the right to access, correct, or delete your personal data at any time.

To exercise these rights: privacy@thaistayandfly.com

We share your data only with services essential to operating the platform:

We do not share your data with advertisers, marketers, or any other third parties.

When you ask us to email you a sign-in code, Cloudflare Turnstile checks that the request comes from a person rather than an automated script. It runs silently - there is nothing to click and nothing to see.

The check runs only at that moment. Opening the sign-in page loads Turnstile's code from Cloudflare, so their servers see that request as they would for any file they host, but no check is performed and no code is sent. Signing in with Google does not involve Turnstile at all.

When it does run, Cloudflare receives your IP address, TLS fingerprint, browser user-agent and the identifier of our site. Cloudflare states that these signals are used solely to detect and block bots, and not to identify, profile or target individuals, and not for advertising.

See Cloudflare's Turnstile Privacy Addendum, which forms part of this policy.

We count visits to our pages with Vercel Web Analytics, a tool from our hosting provider, to learn how people find us and which pages they use. It uses no cookies and stores nothing on your device.

For each page you open it records the page address, the site that linked you here, your approximate location (country, region and city), and your browser, operating system and type of device. It does not record what you type, your answers or your documents, and visits are not linked to your account.

Vercel tells repeat visits apart for at most 24 hours, using a code made from your connection that it then discards. We only see totals, never an individual visitor.

When you make a photo sheet, save your visa expiry date or turn on notifications, we note that it happened and when. This tells us whether the free tools are useful. We do not record your photos or the date itself with it.

So that one person making five sheets counts once, your browser keeps a random number for us. We make it up the first time it is needed, and it says nothing about you. If you are signed in, the note is also linked to your account. When you sign in, notes made earlier on the same device are linked to your account too, so we can see whether a free tool helped someone decide to buy.

Signing out removes the number from your device. "Delete my data" and deleting your account erase the notes linked to your account.

We use essential cookies only - for authentication and session management. No advertising or tracking cookies.

If we make significant changes to this policy, we will notify you by email. Continued use of the service after changes constitutes acceptance.